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DETAILED ACTION 

1 . Claims 1 -44 are presented for examination. ; 

Specification 

2. The title of the invention is not descriptive. A new title is required that is clearly 
indicative of the invention to which the claims are directed. 

Claim Rejections - 35 USC § 102 

3. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
fo.mi the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21 (2) 
of such treaty in the English language. 

4. Claims 1-44 are rejected under 35 U.S.C. 102(e) as being anticipated by 
Gudjonsson etal., US pat. No.6.564,261 (hereafter Gudjonsson). 

As to claim 1 , Gudjonsson discloses a method for mapping a user in a heterogeneous 
network comprising: 

receiving on a computer in a first network a user name associated with a user 
(user 7 fig.6) in the first network (first cluster 1 ), mapping the user name to a user name 
associated with the user in a second network (other cluster 1 fig.6) and mapping the 
user name associated with the user (user 7 in other cluster) in the second network to a 
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user identification number (user ID or UID) associated with the user in the second 
networl^ (establishing sessions between two networks, see abstract, figs.1, 6, col.1 1 line 
21 to col. 12 line 54). 

As to claims 2 and 3, Gudjonsson discloses accessing resources on a computer in the 
second network using the user identification number and authenticating the user after 
the mappings (using authentication service that handles clients' access to the clusters 
1 , see col.1 1 lines 5-64). 

As to claims 4-6. Gudjonsson discloses that first network uses a personal computer 
based operating system, the second network uses a UNIX based operating system and 
a gateway (25 fig.1 1) (see fig.1 1, col.15 lines 13-64 and col.16 lines 7-67 and col.38 
lines 21-43). 

As to claims 7-9, Gudjonsson discloses a client (user 7 fig.6), a map on a mapping 
server (fig.1 1) and mapping including using remote procedure calls (seeflg.11, col.15 
lines 13-64 and col.16 lines 7-67). 

As to claim 10, Gudjonsson discloses the remote procedure calls comprise at least one 
remote procedure call selected from the group consisting of getting credentials, 
authenticating using credentials, checking map status, and dumping maps remote 
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procedure calls (see fig.1 1 , coL15 lines 13-64, col.16 lines 7-67 and col.18 lines 15-67). 

As to claim 1 1 , Gudjonsson discloses a computer-readable medium storing computer- 
executable instructions to map a user name associated with a user (user 7 of fig. 6) in a 
first network (cluster 1 fig.6) to a user name associated with a user in a second network 
(other cluster 1 of fig.6) and to map the user name associated with the user in the 
second network to a user identification number (user ID or UID) associated with the 
user in the second network (establishing sessions between two networks, see abstract, 
figs.1 . 6, col.1 1 line 21 to col.12 line 54). 

As to claim 12, Gudjonsson discloses a graphical user interface a (standard GUI 
program with a persistent connection to the server, see col.34 lines 26-55). 

As to claim 13, Gudjonsson discloses a method for mapping a user in a heterogeneous 
network comprising: receiving on a computer in a first network (cluster 1 fig.6) a user 
name and a password (user 7 of fig.6) associated with a user in a second network 
(other cluster 1 fig.6); authenticating the user using the user name and the password to 
produce an authenticated user (using authentication service that handles clients' access 
to the clusters 1 , see col.1 1 lines 5-64) and mapping the authenticated user to a user 
identification number associated with the user in a second network (establishing 
sessions between two networks, see abstract, figs.1, 6, col.1 1 line 21 to col.12 line 54). 



Application/Control Number: 1 0/01 7,469 Page 5 

Art Unit: 2151 

Claim 14 is rejected for the same reasons set forth in claim 2. 



As to claims 15-18, Gudjonsson discloses the first network perfonning the 
authenticating, mapping, using a personal computer based operating system and a 
UNIX based operating system (see fig.11, col.15 lines 13-64 and col.16 lines 7-67 and 
col.38 lines 21-43). 

Claims 19-23 are rejected for the same reasons set forth in claims 6-10 respectively. 
Claims 24 and 25 are rejected for the same reasons set forth in claims 1 1 and 12 
respectively. 

As to claim 26, Gudjonsson discloses a method for mapping a user in a heterogeneous 
network comprising: receiving on a computer in a second network (clusterl fig.6) a user 
identification number (receiving a User ID or UID) associated with a user in a first 
network (other cluster 1 fig.6) and mapping the user identification number to a user 
name associated with the user in the second network (establishing and mapping 
sessions between two networks, see abstract, figs.1 , 6, col.1 1 line 21 to col. 12 line 54 
and col.30 line 61 to col.31 line 58). 

As to claim 27, Gudjonsson discloses accessing resources on a computer in the second 
network using the user name (see fig.1 1, col.15 lines 13-64 and col.18 lines 15-67). 
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Claims 28-36 are rejected for the same reasons set forth in claims 15-23 respectively. 
Claims 37 and 38 are rejected for the same reasons set forth in claims 24 and 25 
respectively. 

As to claim 39, Gudjonsson discloses a method for mapping a user in a heterogeneous 
network comprising: receiving on a computer in a first network (cluster 1 fig.6) a user 
name associated with a user (user 7 fig.6) in the first network; mapping the user name 
to a user name associated with the user in a second network (other cluster 1 of fig.6) 
and mapping the user name associated with the user in the second network to a user 
identification number (DID or User ID) associated with the user in the second network, 
wherein the mapping includes using a map on a mapping server and the mapping 
server maintains a default map, a simple map and/or explicit maps that provide override 
(establishing and mapping sessions between two networks, see abstract, figs. 6, 1 1 , 
col.11 line 21 to col.12 line 54 and col.18 lines 15-67). 

As to claim 40, Gudjonsson discloses algorithms for unmapping usere, mapping multiple 
users and/or group mapping (mapping or deleting users from clusters or networks, see 
col.28 lines 21-64 and col.31 line 22 to col.32 line 60). 

As to claim 41, Gudjonsson discloses a method for mapping a user in a heterogeneous 
network comprising: receiving on a computer in a first network (cluster 1 fig.6) a user 
name and a password associated with a user in a second network and authenticating 
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the user using the user name and the password to produce an authenticated user; 
(using authentication service that handles clients' access to the clusters 1 , see col.1 1 
lines 5-64) and mapping the authenticated user to a user identification number 
associated with the user in a second network (other cluster of fig.6) wherein the 
mapping includes using a map on a mapping server and the mapping server maintains 
a default map, a simple map and/or explicit maps that provide override (establishing and 
mapping sessions between two networks, see abstract, figs. 6, 11, col.11 line 21 to 
col. 12 line 54 and col. 18 lines 15-67). 

As to claim 42, Gudjonsson discloses algorithms for unmapping users, mapping multiple 
users and/or group mapping (mapping or deleting users from clusters or networks, see 
col.28 lines 21-64 and col.31 line 22 to col.32 line 60). 

Claims 43 and 44 are rejected for the same reasons set forth in claims 39 and 40 
respectively. 

Other prior art cited 

5. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

a. Viets et al, US pat. No.6,357,010. 

b. Swildens et al. US pat. No.6,754,699. 

c. Viets et al, US pat. No.6,640,307. 

Conclusion 
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6. Claims 1-44 are rejected. 

7. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Khanh Dinh whose telephone number is (571) 272- 
3936. The examiner can normally be reached on Monday through Friday from 8:00 A.m. 
to 5:00 P.m. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Zarni Maung, can be reached on (703) 272-3939. The fax phone number 
for this group is (703) 872-9306. 

A shortened statutory period for reply is set to expire THREE months from the 
mailing date of this communication. Failure to response within the period for response 
will cause the application to become abandoned (35 U. S.C. Sect. 133). Extensions of 
time may be obtained under the provisions of 37 CFR 1 . 136(A). 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval IPAIRI system. Status information for published 
applications may be obtained from either Private PMR or Public PMR. Status 
infomiation for unpublished applications is available through Private PAIR only. For 
more infonnatio.n about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free). 




Khanh Dinh 
Patent Examiner 
Art Unit 2151 
2/6/2005 



